Uni Posted July 14, 2020 ID:1394493 Share Posted July 14, 2020 (edited) Hi, and thanks for a great service. I'm running Windows 10 and use the latest version of Firefox and MWB Premium. I have had two websites blocked by MWB, last Saturday and again today, Tuesday. Plus I seem to have had an inordinate amount of trackers that were blocked by Firefox today and yesterday, though I was attempting to do some on-line shopping on both days which is a rare occurrence (see Firefox pic below): Sorry about the size of the pic. Anyway, here are the two MWB potential Trojan reports: -Log Details- Protection Event Date: 7/11/20 Protection Event Time: 12:43 PM Log File: c96163b0-c36b-11ea-b229-3cf011237cd2.json -Software Information- Version: 4.1.0.56 Components Version: 1.0.955 Update Package Version: 1.0.26691 License: Premium -System Information- OS: Windows 10 (Build 18362.900) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0 -Website Data- Category: Trojan Domain: pingcharity.co.uk IP Address: 78.137.164.58 Port: 80 Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe Protection Event Date: 7/14/20 Protection Event Time: 9:28 PM Log File: 9e64329e-c610-11ea-82a2-3cf011237cd2.json -Software Information- Version: 4.1.0.56 Components Version: 1.0.955 Update Package Version: 1.0.26821 License: Premium -System Information- OS: Windows 10 (Build 18362.900) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0 -Website Data- Category: Trojan Domain: www.glofoxlogin.com IP Address: 190.2.139.23 Port: 443 Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe For this last report, in green, I was attempting to go into: https://www.shannonleisurecentre.ie/ The shannon website also produced a Trojan warning on a different Windows 10 laptop, also running MWB premium and with Firefox. For the first report, in blue, I was attempting to visit: pingcharity.co.uk which is shown as the Domain name. This is the first time I have been warned of any Trojan since I installed MWB Premium two or three months ago. All of the MWB scans on each start-up of my laptop have been clean so far. Can you tell me whether these websites have indeed been compromised or is the problem at my end? What should I do? Both website representatives have been contacted to let them know. Edited July 14, 2020 by AdvancedSetup removed live hyperlinks Link to post Share on other sites More sharing options...
Porthos Posted July 14, 2020 ID:1394508 Share Posted July 14, 2020 First I would do a manual update to Malwarebytes. It might help but might not. After the first update, There wil be the update to 4.1.2. Quote Version: 4.1.0.56 Components Version: 1.0.955 Link to post Share on other sites More sharing options...
Uni Posted July 14, 2020 Author ID:1394531 Share Posted July 14, 2020 Okay, thanks. I did as you asked: Link to post Share on other sites More sharing options...
Uni Posted July 14, 2020 Author ID:1394533 Share Posted July 14, 2020 After the update, both websites still produce warnings about Trojans. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 14, 2020 Root Admin ID:1394536 Share Posted July 14, 2020 Topic was moved to False Positive forum for feedback from Research Link to post Share on other sites More sharing options...
Staff Solution Dashke Posted July 15, 2020 Staff Solution ID:1394601 Share Posted July 15, 2020 Thanks, both blocks have been removed. Link to post Share on other sites More sharing options...
Recommended Posts